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EN THE CLAIMS: 



1 . (Currently Amended) A method in a data processing system for providing access 
to resources within the data processing system, the method comprising the data 
processing system implemented steps of: 



sending a first cookie to the requestor in response to the request, wherein the 
cookie is used to access the resource, 

storing an identification of the requestor and the first cookie to form a stored 
identification and a stored cookie; 

responsive to receiving a second cookie from a source, comparing an 
identi fication of the source and the second cookie with the stored identification and the 
stored cookie; and 

responsive to a match between the identification of the source and the second 
cookie and the stored identification and the stored cookie, allowing access to the 
resource. 



2. (Original) The method of claim 1, wherein access to the resource is allowed by 
accepting the second cookie. 

3. (Original) The method of claim 1 further comprising: 

responsive to an absence of a match between the identification of the source and 
the second cookie and the stored identification and the stored cookie, rejecting the second 
cookie. 

4. (Original) The method of claim 1 , wherein the resource is a file and the first 
cookie identifies disk location of the file. 

5. (Original) The method of claim 1 , wherein the source is a web server. 
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receiving a request from a requestor to access a resource in the data processing 



system; 
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6. (Original) The method of claim 1, wherein the step of storing an identification of 
the source and the first cookie to form a stored identification and a stored cookie 
comprises: 

storing the identification of the source and the first cookie in a cache. 

7. (Original) The method of claim 6, wherein the identification is an Internet 
protocol address. 

8. (Original) The method of claim 1, wherein the steps of receiving, sending, 
storing, comparing, and allowing are performed in a browser. 

9. (Original) The method of claim 1, wherein the resource is a file having a path and 
further comprising: 

generating a disk location number from the path; and 
\ placing the disk location number into the first cookie. 

(p 

10. (Original) A method in a data processing system for processing a cookie, the . 
method comprising the data processing system implemented steps of: 

receiving a request from a source to access a resource in the data processing 

system; 

sending a cookie to the source to form a sent cookie, wherein the sent cookie is 
used to access the resource; 

responsive to receiving a subsequent cookie, authenticating the subsequent cookie 
with the cookie; and 

responsive to authenticating the subsequent cookie, allowing access to the 
resource. 

1 1 . (Original) The method of claim 1 0 further comprising: 
storing the sent cookie and an identification of the source. 
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12. (Original) The method of claim 1 0 ? wherein the sent cookie and the identification 
of the source are stored in a cache. 

13. (Original) The method of claim 12, wherein the identification is a stored 
identification and wherein the authenticating step comprises: 

comparing the stored identification with an identification of a source for the 
subsequent cookie; and 

comparing the sent cookie with the subsequent cookie, 

14. (Original) The method of claim 10, wherein the source is a Web server. 

15. (Original) The method of claim 10, wherein the resource is a file. 

16. (Original) The method of claim 15, wherein the cookie includes a disk location of 
the file. 



17. (Original) A data processing system comprising: 
a cache; 

a cookie management process, wherein the cookie management process generates 
a cookie in response to receiving a request to access a resource within the data processing 
system from a requestor; sends the cookie to the requestor, stores the cookie and an 
identification of the requestor in the cache; responsive to being presented a received 
cookie from a source, compares the cookie and the identification of the requestor to the 
received cookie and the source; and allows access to the resource in response to a match 
between the cookie and the identification of the requestor with the received cookie and 
the source. 

18. (Original) The data processing system of claim 17, wherein the requestor is a 
server. 

19. (Original) The data processing system of claim 17, wherein the resource is a file. 
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20. (Original) The data processing system of claim 1 7, wherein the identification of 
the requestor and the identification of the source are Internet protocol addresses. 

21. (Original) A data processing system for providing access to resources within the 
data processing system, the data processing system comprising: 

receiving means for receiving a request from a requestor to access a resource in 
the data processing system; 

sending means for sending a first cookie to the requestor, wherein the first cookie 
is used to access the resource; 

storing means for storing an identification of the requestor and the first cookie to 
form a stored identification and a stored cookie; 

comparing means, responsive to receiving a second cookie from a source, for 
comparing an identification of the source and the second cookie with the stored 
identification and the stored cookie; and 

allowing means, responsive to a match between the identification of the source 
and the second cookie and the stored identification and the stored cookie, for allowing 
access to the resource. 



22. (Original) The data processing system of claim 21 , wherein access to the resource 
is allowed by accepting the second cookie. 

23. (Original) The data processing system of claim 21 further comprising: 
rejecting means, responsive to an absence of a match between the identification of 

the source and the second cookie and the stored identification and the stored cookie, for 
rejecting the second cookie. 

24. (Original) The data processing system of claim 21 , wherein the resource is a file 
and the first cookie identifies disk location of the file. 
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25. (Original) The data processing system of claim 21, wherein the source is a web 
server. 

26. (Original) The data processing system of claim 21, wbeTein the storing means for 
storing an identification of the source and the first cookie to form a stored identification 
and a stored cookie comprises: 

storing means for storing the identification of the source and the first cookie in a 

cache. 

27. (Original) The data processing system of claim 26, wherein the identification is 
an Internet protocol address. 

28. (Original) The data processing system of claim 21 , wherein the receiving means, 
sending means, storing means, comparing means, and allowing means are performed in a 
browser. 

29. (Original) The data processing system of claim 21, wherein the resource is a file 
having a path and further comprising; 

generating means for generating a disk location number from the path; and 
placing means for placing the disk location number into the first cookie. 

30. (Original) A data processing system for processing a cookie, the data processing 
system comprising: 

receiving means for receiving a request from a source to access a resource in the 
data processing system; 

sending means for sending a cookie to the source to form a sent cookie, wherein 
the sent cookie is used to access the resource; 

authenticating means, responsive to receiving a subsequent cookie, for 
authenticating the subsequent cookie with the cookie; and 

allowing means, responsive to authenticating the subsequent cookie, for allowing 
access to the resource. 
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3 1 . (Original) The data processing system of claim 30 farther comprising: 
storing means for storing the sent cookie and an identification of the source. 

32. (Original) The data processing system of claim 30, wherein the sent cookie and 
the identification of the source are stored in a cache. 

33. (Original) The data processing system of claim 32, wherein the identification is a 
stored identification and wherein the authenticating means comprises: 

first comparing means for comparing the stored identification with an 
identification of a source for the subsequent cookie; and 

second comparing means for comparing the sent cookie with the subsequent 

cookie. 




34. (Original) The data processing system of claim 30, wherein the source is a Web 
server. 



35. (Original) The data processing system of claim 30, wherein the resource is a file. 

36. (Origin al) The data processing system of claim 35, wherein the cookie includes a 
disk location of the file. 

37. (Original) A computer program product in a computer readable medium for 
providing access to resources within the data processing system, the computer program 
product comprising: 

first instructions for receiving a request from a requestor to access a resource in 
the data processing system; 

second instructions for sending a first cookie to the requestor, wherein the first 
cookie is used to access the resource; 

third instructions for storing an identification of the requestor and the first cookie 
to form a stored identification and a stored cookie; 
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fourth instructions, responsive to receiving a second cookie from a source, for 
comparing an identification of the source and the second cookie with the stored 
identification and the stored cookie; and 

fifth instructions, responsive to a match between the identification of the source 
and the second cookie and the stored identification and the stored cookie, for allowing 
access to the resource. 

38. (Original) A computer program product in a computer readable medium for 
processing a cookie, the computer program product comprising: 
^ first instructions for receiving a request from a source to access a resource in the 

data processing system; 

second instructions for sending a cookie to the source to form a sent cookie, 
wherein the sent cookie is used to access the resource; 

third instructions, responsive to receiving a subsequent cookie, for authenticating 
the subsequent cookie with the cookie; and 

fourth instructions, responsive to authenticating the subsequent cookie, for 
allowing access to the resource. 
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